Grid Analytics Europe 2016: "Defend the Grid", April 2016
•Download as PPTX, PDF•
1 like•646 views
Presentation by Jon Longstaff at Grid Analytics Europe 2016: Cyber-Secure Analytics – identifying and overcoming the security vulnerabilities of next generation grid analytics infrastructures that integrate multiple systems and data sources.
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Grid Analytics Europe 2016: "Defend the Grid", April 2016
Similar to Grid Analytics Europe 2016: "Defend the Grid", April 2016 (20)
Recently uploaded
Recently uploaded (20)
Grid Analytics Europe 2016: "Defend the Grid", April 2016
- 1. 5th April 2016 Defending the Grid
- 2. Copyright ©2016 OMNETRIC Group. All rights reserved. 2 We help capture the opportunities of digitalization in the grid ...dedicated to helping utilities bridge the gap between operations and information technology ...existing as a separate entity to which both Siemens and Accenture could bring their IP and integrate IT and OT more effectively ...with expert practitioners from both companies, working as one team In 2014, Siemens and Accenture launched a joint venture based on the market’s need for a new solution provider Engineering and energy technology Smart grid applications Grid control experience Systems integration and services capabilities Proven delivery methodologies Industry-specific technologies, assets and processes Dedicated to utilities OT-IT integration specialist Integrated smart grid solutions for a digital grid IT experts Data scientists Engineers Better outcomes from integrating information and operations technology
- 3. Copyright ©2016 OMNETRIC Group. All rights reserved. 3 Security is about managing risk: The idea that something bad might happen… but then again it might not
- 4. Copyright ©2016 OMNETRIC Group. All rights reserved. 4 Cyber Security Objectives Confidentiality Availability IntegrityRegulation
- 5. Copyright ©2016 OMNETRIC Group. All rights reserved. 5 Load and Generation • One scalable platform for aggregation of both load plus storage and generation • Make use of future applications enabling new business models without the need to invest in a new platform • Enter load flexibility market Flexible aggregation for supply and demand CommercialIndustryStorageBiomassCHP / Backup Diesel Wind / PV Connected External Processes DERMS® (Decentralized Energy Management System) • Modeling • Forecasting • Scheduling • Real-time Optimization Weather Forecasting Energy Trading Billing Contract Management Network Operations Improved operational and business efficiency € Current Optimized
- 6. Copyright ©2016 OMNETRIC Group. All rights reserved. 6 Case Study – Virtual Power Plants EnergyIP DERMS DSO/TSO/Market Coordinator Corporate Systems Local Controllers & Meters External Information Sources Distributed Energy Resource DSO/TSO/ Market System Under Consideration
- 7. Copyright ©2016 OMNETRIC Group. All rights reserved. 7 Protecting Critical Infrastructure
- 8. Copyright ©2016 OMNETRIC Group. All rights reserved. 8 Protecting Critical Infrastructure http://www.nist.gov/cyberframework/ Identify DetectRespond ProtectRecover Defending the Grid
- 9. Copyright ©2016 OMNETRIC Group. All rights reserved. 9 Protecting Critical Infrastructure What are we trying to protect? - Physical Assets - Data - Software - Interfaces What are the risks? - Safety, Reputation, Financial What is the risk appetite? - Business governance Identify DetectRespond ProtectRecover Defending the Grid Key challenge: Who signs off the risks?
- 10. Copyright ©2016 OMNETRIC Group. All rights reserved. 10 Protecting Critical Infrastructure Identify DetectRespond ProtectRecover Defending the Grid How can we protect our most important assets? - Access Control - Awareness and training - Data security at rest and in-motion - Policies and Procedures - Maintenance - Protective Technology Key challenge: Getting the security message to everyone involved
- 11. Copyright ©2016 OMNETRIC Group. All rights reserved. 11 Protecting Critical Infrastructure Identify DetectRespond ProtectRecover Defending the Grid If a breach did occur, how would we know? - Anomalies and events - Security continuous monitoring - Detection Processes Key challenge: Searching the haystack
- 12. Copyright ©2016 OMNETRIC Group. All rights reserved. 12 Protecting Critical Infrastructure Identify DetectRespond ProtectRecover Defending the Grid If we detect a breach, what happens next? - Response Planning - Communications - Analysis - Mitigation - Improvements Key challenge: Speed and nature of response
- 13. Copyright ©2016 OMNETRIC Group. All rights reserved. 13 Protecting Critical Infrastructure Identify DetectRespond ProtectRecover Defending the Grid So the immediate crisis is over. What next? - Recovery Planning - Improvements - Communication Key challenge: Preparation, preparation, preparation
- 14. Copyright ©2016 OMNETRIC Group. All rights reserved. 14 DSO/TSO/Market Coordinator Corporate Systems External Information Sources Distributed Energy Resource DSO/TSO/ Market System Under Consideration Case Study – Virtual Power Plants Log Management Whitelisting IDS Vulnerability Mgt Protocol Aware Firewalls Secure Control Interface Trusted Connection Protocol Aware Firewalls Strong User Authentication Response and Recovery Procedures and Protocols EnergyIP DERMS Local Controllers & Meters
- 15. Copyright ©2016 OMNETRIC Group. All rights reserved. 15 Engineering and energy technology Smart grid applications Grid control Systems integration and services capabilities Proven delivery methodologies Industry-specific technologies, assets and processes Defending the Grid OMNETRIC Group is dedicated to the global delivery of integrated information technology and operational technology solutions and services, helping utility companies to achieve greater grid reliability and efficiency. OMNETRIC Group can support clients with innovative solutions wherever they may be on their path to a smarter grid. For more information, visit www.omnetricgroup.com. For more information, contact: Jon Longstaff Head of Cyber Security jon.longstaff@omnetric.com +44 780 882 7857
Editor's Notes
- ...dedicated to helping utilities bridge the gap between operations and information technology ...existing as a separate entity to which both Siemens and Accenture could bring their IP and integrate IT and OT more effectively ...with expert practitioners from both companies, working as one team
- Talk about each – reference analytics
- Challenge Integrating diverse renewable energy sources, like in Hawaii or in California Declining prices on some energy markets require flexibility in offering the portfolio via different trading channels Be prepared for high volume of flexible loads to participate in reserve markets Solution A virtual power plant management system will be implemented in order to monitor and control – in case of RWE - up to 50.000 distributed assets
- VPP - Lots of data - consumption, control, forecasts, market, commercial - not "traditional" grid operations - which is value of case study as it challenges many of the usual concepts - forget the air gap - Real - we are working on these projects today across Europe Analytics – two main challenges chain of trust from the source of the data to the analytics system Protection of the data in the analytics system
- Wouldn’t it be great if there was a shiny piece of IT we could simply slot into the data centre that would solve all of our problems. Mitigate all of those risks, patch those vulnerabilities? Unfortunately no – it is hard work, incremental improvement. Much like everything else we do.
- NIST framework is great to structure the discussion Not a complete methodology – we rely more on ISA-62443 to undperpin our approach
- Analytics focus Chain of trust Combination of different data streams – better insight but may be greater risks (customer number / name / demographics)
- Who is allowed to access data valuable to you – valuable to a competitor – valuable to a criminal Training JV Phishing At rest Very large datasets with high access rates -> encryption may not be the best approach so what are other strategies Don’t forget backups
- Who do you tell? NIS will “require operators of essential services in the energy, transport, banking and healthcare sectors, and providers of key digital services like search engines and cloud computing, to take appropriate security measures and report incidents to the national authorities.” Does someone in your organisation have authority to disconnect your data warehouse? Is it you? What would happen if there an incident going on at your organisation now but you aren’t picking up the phone because you are at an excellent talk on securing your data warehouse???
- Three key points Longest and possibly most expensive stage (ref ukraine, heartbleed) Use as a feedback loop back to the development/implementation team. Don’t let them design a solution that can’t be recovered – or is too expensive Build and prepare a plan – and try to test something, even a desktop exercise
- VPP - Lots of data - consumption, control, forecasts, market, commercial - not "traditional" grid operations - which is value of case study as it challenges many of the usual concepts - forget the air gap - Real - we are working on these projects today across Europe Analytics – two main challenges chain of trust from the source of the data to the analytics system Protection of the data in the analytics system